This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/f-A38n-d5fyud_iYPeLHbx-sbUk.roa File: f-A38n-d5fyud_iYPeLHbx-sbUk.roa (raw, json) Hash identifier: 2hwdLgzaTlm4Tton83Slz9wiJFdMuYjI3gUlE3qoav4= Subject key identifier: 7F:E0:37:F2:7F:9D:E5:FC:AE:77:F8:98:3D:E2:C7:6F:1F:AC:6D:49 Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019A731C7D6952EDD54D2EB3489F99FF76CB Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/f-A38n-d5fyud_iYPeLHbx-sbUk.roa Signing time: Tue 11 Nov 2025 13:30:38 +0000 ROA not before: Tue 11 Nov 2025 13:30:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204916 IP address blocks: 2a0e:7040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:1c:7d:69:52:ed:d5:4d:2e:b3:48:9f:99:ff:76:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Nov 11 13:30:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7fe037f27f9de5fcae77f8983de2c76f1fac6d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fd:c2:a3:3a:e0:ff:7a:7e:fe:81:ad:d8:c8: e9:e5:1e:84:0f:f5:e8:e0:9e:aa:e9:1b:25:c2:22: 34:cd:00:e8:60:7c:9e:90:94:17:19:65:05:6a:ae: 2a:44:4f:6f:0d:ca:c3:bd:00:02:d7:42:1d:79:03: c2:03:c1:72:2e:39:e3:ac:60:82:05:01:c4:58:fe: d5:e9:fc:fa:29:43:a5:3b:19:01:98:34:14:41:7f: 63:68:3e:4b:ca:f6:55:64:44:1d:f0:4c:fc:0d:45: 18:b8:c6:1c:bf:d7:b2:21:53:93:07:79:e9:cb:92: 03:d2:c8:0a:15:d3:d7:79:5b:cc:b7:fa:98:98:07: 21:ac:1a:6e:01:6b:1c:71:1b:5e:ec:95:c5:a8:84: 77:4d:6b:78:86:5c:14:52:f7:6b:a7:52:31:e6:67: bd:8a:58:d1:29:5c:91:dc:97:ac:ac:23:ea:fb:97: 87:09:b8:1a:11:bc:95:9c:cb:2d:b7:9b:7e:8b:b5: 2b:cd:f4:0e:05:63:0c:61:c8:bc:c0:b2:99:6c:5c: 0d:6e:c8:ab:f0:71:22:09:d6:d2:2d:6a:dc:73:d5: ba:bd:02:f9:69:17:6e:61:cd:83:62:f7:3c:fd:b8: 7c:38:2f:b3:ec:0d:1e:6f:d9:f0:7c:12:b7:5c:2f: 13:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E0:37:F2:7F:9D:E5:FC:AE:77:F8:98:3D:E2:C7:6F:1F:AC:6D:49 X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/f-A38n-d5fyud_iYPeLHbx-sbUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:7040::/29 Signature Algorithm: sha256WithRSAEncryption a7:dd:9d:02:49:57:4b:87:18:4e:72:32:39:21:25:f1:8a:43: 07:a0:83:fe:21:de:85:8a:22:b3:24:61:c4:6c:e3:d0:ce:e4: 64:2a:fa:9f:61:87:60:47:b3:e3:bb:b5:b1:04:47:b3:d9:e6: c9:28:19:03:f9:3e:41:1e:c7:a4:4f:7c:22:b8:20:49:25:d6: 1d:4c:38:82:e5:6c:33:33:98:fc:b0:f9:3a:36:25:33:fe:c3: 1d:39:38:b3:f4:80:f6:3d:79:bc:58:db:80:2b:12:83:8e:d1: 3c:f6:b1:07:34:ef:13:2d:bc:0f:b9:47:45:bd:d4:15:d9:20: 4d:b3:5d:17:68:ad:ce:e6:51:13:ab:d5:b5:75:ea:6c:37:42: 0b:06:2f:16:57:8c:1f:bb:2b:46:32:dd:c3:84:c7:6a:c1:56: 7a:1a:07:a6:b5:90:fc:ee:85:6c:e3:6d:49:5f:fe:26:19:0e: fe:a0:b2:fe:c1:17:8d:09:6c:6a:41:c9:ea:a6:4c:0f:c7:4a: e1:12:a6:62:27:70:21:8e:45:58:31:a9:ed:fa:56:5a:0e:81: d9:1a:1f:2a:56:6a:c8:88:c6:56:4c:88:66:47:bf:6c:79:ed: 84:37:75:14:63:0b:89:d6:55:e0:b4:16:6f:23:3e:dc:7d:02: e5:6b:29:55 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZpzHH1pUu3VTS6zSJ+Z/3bLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjUxMTExMTMzMDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmUwMzdmMjdmOWRlNWZjYWU3N2Y4OTgzZGUyYzc2ZjFmYWM2ZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/3Cozrg/3p+/oGt2Mjp5R6ED/Xo 4J6q6RslwiI0zQDoYHyekJQXGWUFaq4qRE9vDcrDvQAC10IdeQPCA8FyLjnjrGCC BQHEWP7V6fz6KUOlOxkBmDQUQX9jaD5LyvZVZEQd8Ez8DUUYuMYcv9eyIVOTB3np y5ID0sgKFdPXeVvMt/qYmAchrBpuAWsccRte7JXFqIR3TWt4hlwUUvdrp1Ix5me9 iljRKVyR3JesrCPq+5eHCbgaEbyVnMstt5t+i7UrzfQOBWMMYci8wLKZbFwNbsir 8HEiCdbSLWrcc9W6vQL5aRduYc2DYvc8/bh8OC+z7A0eb9nwfBK3XC8TaQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFH/gN/J/neX8rnf4mD3ix28frG1JMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvZi1BMzhuLWQ1Znl1ZF9pWVBlTEhieC1zYlVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg5wQDAN BgkqhkiG9w0BAQsFAAOCAQEAp92dAklXS4cYTnIyOSEl8YpDB6CD/iHehYoisyRh xGzj0M7kZCr6n2GHYEez47u1sQRHs9nmySgZA/k+QR7HpE98IrggSSXWHUw4guVs MzOY/LD5OjYlM/7DHTk4s/SA9j15vFjbgCsSg47RPPaxBzTvEy28D7lHRb3UFdkg TbNdF2itzuZRE6vVtXXqbDdCCwYvFleMH7srRjLdw4THasFWehoHprWQ/O6FbONt SV/+JhkO/qCy/sEXjQlsakHJ6qZMD8dK4RKmYidwIY5FWDGp7fpWWg6B2RofKlZq yIjGVkyIZke/bHnthDd1FGMLidZV4LQWbyM+3H0C5WspVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:20 2025 by rpki-client